EulerOS 2.0 SP5 : netpbm (EulerOS-SA-2019-2173)

According to the version of the netpbm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The netpbm package contains a library of functions which support programs for handling various graphics file formats, including .pbm portable...

openSUSE Security Update : netpbm (openSUSE-2019-1605)

This update for netpbm fixes the following issues : Security issues fixed : - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. - create netpbm-vulnerable subpackage and move...

openSUSE: Security Advisory for netpbm (openSUSE-SU-2019:1605-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1605-1 Security update for netpbm

This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. - create netpbm-vulnerable subpackage and move...

SUSE SLED12 / SLES12 Security Update : netpbm (SUSE-SU-2019:1645-1)

This update for netpbm fixes the following issues : Security issues fixed : CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. CVE-2017-2579: Fixed out-of-bounds read in...

Security update for netpbm (moderate)

openSUSE Security Update: Security update for netpbm Announcement ID: openSUSE-SU-2019:1605-1 Rating: moderate References: 1024288 1024291 1136936 Cross-References: CVE-2017-2579 CVE-2017-2580 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves two vulnerabilities and h...

SUSE-SU-2019:1645-1 Security update for netpbm

This update for netpbm fixes the following issues: Security issues fixed: - CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. - CVE-2017-2579: Fixed out-of-bounds read in...

SUSE-SU-2019:14101-1 Security update for netpbm

This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. - created a netpbm-vulnerable subpackage and move...

SUSE SLED15 / SLES15 Security Update : netpbm (SUSE-SU-2019:1525-1)

This update for netpbm fixes the following issues : Security issues fixed : CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. create netpbm-vulnerable subpackage and move pstopn...

SUSE-SU-2019:1525-1 Security update for netpbm

This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. - create netpbm-vulnerable subpackage and move...

MGASA-2019-0183 Updated netpbm packages fix security vulnerability

The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file CVE-2018-8975...

Updated netpbm packages fix security vulnerability

The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file CVE-2018-8975...

Denial Of Service (DoS) Or Remote Code Execution (RCE)

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

openSUSE Security Update : netpbm (openSUSE-2019-1200)

This update for netpbm fixes the following issues : - CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVE...

openSUSE: Security Advisory for netpbm (openSUSE-SU-2019:1200-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1200-1 Security update for netpbm

This update for netpbm fixes the following issues: - CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. This update was imported from the SUSE:SLE-15:Update update project...

Security update for netpbm (moderate)

openSUSE Security Update: Security update for netpbm Announcement ID: openSUSE-SU-2019:1200-1 Rating: moderate References: 1086777 Cross-References: CVE-2018-8975 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for netpbm fix...

SUSE SLED15 / SLES15 Security Update : netpbm (SUSE-SU-2019:0855-1)

This update for netpbm fixes the following issues : CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. Note that Tenable Network Security has extracted the preceding description block...

SUSE-SU-2019:0855-1 Security update for netpbm

This update for netpbm fixes the following issues: - CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777...

Remote Code Execution (RCE)

netpbm is vulnerable to remote code execution RCE attacks. The vulnerability exists through a stack-based buffer overflow flaw where an attacker could create a malicious XPM file that would cause xpmtoppm to crash or, potentially, execute arbitrary code with the privileges of the user running...